fix: always enable Remove Protected Exports

- Re-add unconditional step after Apply Kernel Branding (no if: gate)
- Action deletes abi_gki_protected_exports_*, strips protected_exports_list
  from BUILD.bazel, clears protected_modules, handles 6.12+ protected_module_names_list

.github/workflows/build.yml

@@ -313,6 +313,9 @@ jobs:
         sublevel: ${{ steps.extract.outputs.sublevel }}
         brand_name: ${{ inputs.brand_name }}
 
+    - name: Remove Protected Exports
+      uses: ./.github/actions/remove-protected-exports
+
     - name: Clean Kernel Flags
       uses: ./.github/actions/clean-kernel-flags